This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json) Hash identifier: IgtGYnArEAo/+Livk3iWWH4wpSmBbTOop8SiwweTyfc= Subject key identifier: D9:E6:B6:C6:6C:FF:C6:D0:8F:28:42:6D:57:8C:64:CF:2B:E5:B0:9F Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Certificate serial: 019AF12DE89CF518F512D473FDA30C19CCA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=) 2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=) 3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: do6YLCF4mwbRnKPOMqyBC+jg/mpQIo0T0oDvstzMocQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e8:9c:f5:18:f5:12:d4:73:fd:a3:0c:19:cc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=d9e6b6c66cffc6d08f28426d578c64cf2be5b09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:d7:3c:4f:4e:45:59:0b:52:4f:c2:14:81: 4b:04:ba:dd:71:c7:fe:30:91:78:d6:f9:a2:5f:91: b0:a6:af:2a:64:0d:ea:40:84:46:af:a0:d1:d8:c5: 56:ea:86:4c:ad:8e:6a:91:bb:ff:a2:77:88:ff:9d: 09:ac:c0:e8:0c:90:16:cc:6a:12:e3:96:f0:c3:73: 79:bf:91:f5:b8:be:40:40:07:c3:d0:04:e6:0e:16: cc:99:52:73:e3:7e:68:4a:ed:75:2c:10:a7:01:d0: b8:cd:ad:14:13:6b:82:6e:19:ee:34:48:33:f5:52: a1:8a:53:c3:28:29:ff:21:56:a2:d0:83:68:6e:3d: f0:cb:89:5a:89:6f:3a:0e:47:c8:18:60:fe:8f:2e: 03:25:b6:65:3f:31:54:f6:8a:80:98:7d:b2:ee:4c: d3:8f:89:8a:c0:cf:2e:95:30:71:2e:93:16:05:4c: 42:db:ff:8f:9b:54:69:3f:f0:ec:8d:e8:50:6c:29: 28:6b:1e:51:1c:73:c4:f3:07:3f:46:3d:98:15:7b: c4:3c:75:bb:b0:c6:72:af:cc:54:8a:34:24:6d:38: fb:7b:64:5b:4b:f4:b8:60:56:e0:71:88:f8:96:77: 52:77:02:ad:07:85:05:7c:8e:06:fa:0b:e8:5e:b4: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E6:B6:C6:6C:FF:C6:D0:8F:28:42:6D:57:8C:64:CF:2B:E5:B0:9F X509v3 Authority Key Identifier: keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f5:4a:c1:05:63:3d:1a:ec:d8:5d:d7:56:68:d1:b2:d2:8a: dd:e1:2b:3d:ea:59:88:6c:ec:d2:2e:e9:1e:b7:b8:5c:bf:ca: 92:9e:75:95:f0:fb:75:02:57:99:ed:c6:75:2a:99:76:cd:ba: 5b:aa:e0:c6:da:8f:a7:62:2c:3b:6c:75:cd:c2:d7:8a:07:ca: 67:90:87:70:c2:06:e6:e3:37:bc:21:b4:02:70:3b:54:a9:2e: 72:72:5d:b4:a8:b3:93:c6:9f:d3:20:40:8c:4b:da:5b:07:e9: 0e:f0:01:53:93:a5:23:94:01:52:8a:96:bc:cb:02:69:ce:ed: 97:c5:71:21:e4:e5:3e:62:ea:bf:5e:29:92:45:77:15:d4:e1: 6f:6e:c0:a7:21:84:fa:8f:5d:12:2a:de:30:3e:5c:34:ce:07: b4:e2:06:d7:2d:61:8d:2a:59:6b:d9:66:f9:39:89:35:2b:d7: 4c:a8:aa:3c:90:92:de:4f:23:ca:5c:e0:67:1e:2d:e7:28:8e: f8:72:bc:d0:6e:8f:dd:2b:d5:ac:ea:c6:89:bd:25:60:a2:b3: ab:76:cf:ee:b7:38:a7:7f:1f:81:dd:97:38:78:f0:61:5b:a5: e6:cc:d8:8e:c6:cc:c4:8c:db:1f:81:22:f9:51:fc:9e:89:94: ce:6d:98:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeic9Rj1EtRz/aMMGcykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4 ZDhlYzgwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD EyhkOWU2YjZjNjZjZmZjNmQwOGYyODQyNmQ1NzhjNjRjZjJiZTViMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jjXPE9ORVkLUk/CFIFLBLrdccf+ MJF41vmiX5Gwpq8qZA3qQIRGr6DR2MVW6oZMrY5qkbv/oneI/50JrMDoDJAWzGoS 45bww3N5v5H1uL5AQAfD0ATmDhbMmVJz435oSu11LBCnAdC4za0UE2uCbhnuNEgz 9VKhilPDKCn/IVai0INobj3wy4laiW86DkfIGGD+jy4DJbZlPzFU9oqAmH2y7kzT j4mKwM8ulTBxLpMWBUxC2/+Pm1RpP/DsjehQbCkoax5RHHPE8wc/Rj2YFXvEPHW7 sMZyr8xUijQkbTj7e2RbS/S4YFbgcYj4lndSdwKtB4UFfI4G+gvoXrQ0XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnmtsZs/8bQjyhCbVeMZM8r5bCfMB8GA1UdIwQY MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfVKwQVj PRrs2F3XVmjRstKK3eErPepZiGzs0i7pHre4XL/Kkp51lfD7dQJXme3GdSqZds26 W6rgxtqPp2IsO2x1zcLXigfKZ5CHcMIG5uM3vCG0AnA7VKkucnJdtKizk8af0yBA jEvaWwfpDvABU5OlI5QBUoqWvMsCac7tl8VxIeTlPmLqv14pkkV3FdThb27ApyGE +o9dEireMD5cNM4HtOIG1y1hjSpZa9lm+TmJNSvXTKiqPJCS3k8jylzgZx4t5yiO +HK80G6P3SvVrOrGib0lYKKzq3bP7rc4p38fgd2XOHjwYVul5szYjsbMxIzbH4Ei +VH8nomUzm2YoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:10 2025 by rpki-client